Argonath RPG - A World of its own

GTA:SA => SA:MP - San Andreas Multiplayer => SA:MP General => Topic started by: Teddy on May 31, 2016, 02:16:30 am

Title: Now available: Now powered multifactor - easy security
Post by: Teddy on May 31, 2016, 02:16:30 am
I am glad to say we've made significant progress in two factor since we first introduced two factor with keys earlier this year. This week we're taking that next step with an Android app to ease the process 110% without complicated pins and codes. Just a tap.

We have a preview of how the interaction works. Note: my IP is removed but for your end you will actually see the IP address attempting to access the account.

(https://dl.dropboxusercontent.com/s/xnr6d0zo6qcxnbc/Screenshot_20160530-200431.png)

No more codes. No more hassle. No more account breaches. Tap and done.

Getting Now Multi-Factor
You can now opt-in to the beta program:

https://play.google.com/apps/testing/com.argonathrpg.multifactor

Following this, you'll have access to the store page: (do note: it might take a few moments to become available))

https://play.google.com/store/apps/details?id=com.argonathrpg.multifactor

You will then need to get started on the panel with scanning a token:

https://panel.argonathrpg.nl/now

Is it fast?

As soon as I typed my password in, by the time I looked down at my phone the notification was there. We do this by prefetching the data needed when you're still connecting to Argonath. As soon as I tap approve and look up, I'm in looking at the motd screen. It's seamless and flawless.

note: testing was done over WiFi and was not tested on cellular data... then again why would you need it?

Notification isn't working?

We generate a key used in Google Auth much like the stand two factor method, you won't need Google Auth however since the app itself has this stored and can generate the token. Simply click 'Help' on the dialog and select 'Use key'.

Will staff get rights using this method?

Yes, the staff requirements to have two factor enabled is fulfilled with this method.

What versions of Android?
4.4.2 to 6.0.1. Not compatible with those before 4.4.2 or with the Android N preview.

What if I click reject?

If you click reject the user will be booted from the server without being permitted in. If this wasn't you, please contact us immediately and change your password ASAP.
Title: Re: Launching this week: Now powered multifactor - easy security
Post by: AK47 on May 31, 2016, 02:31:41 am
What about us iOS-users? :)
Title: Re: Launching this week: Now powered multifactor - easy security
Post by: Teddy on May 31, 2016, 02:33:22 am
What about us iOS-users? :)

There is no estimate on a version for iOS users due to some 'licensing' term snags (hence the topic seeking legal experience). My recommendation of course would be to join the 85%+ of the world and get a real phone. :)
Title: Re: Launching this week: Now powered multifactor - easy security
Post by: Teddy on May 31, 2016, 04:49:11 am
Correction: The app will be compatible with Android versions 4.1 to 6.0.1.

The app will enter public beta sometime tomorrow, you can opt-in to the beta program and try it out a bit early. Do note, there is quite a bit of last minute stability problems still being worked out on the Now network. For the most part things are fully operational but the occasional snag still arises. Those problems should be worked out by the end of the week and more people using it could help me better track the problems. Don't worry, if it crashes when you're trying to login wait about 5 minutes and it'll reboot itself.
Title: Re: Launching this week: Now powered multifactor - easy security
Post by: TiMoN on May 31, 2016, 10:03:01 am
Can I use shit like Andyroid or Bluestacks? Sometimes I cba to walk to my desk and get my phone.
Title: Re: Launching this week: Now powered multifactor - easy security
Post by: Teddy on May 31, 2016, 03:24:20 pm
Can I use shit like Andyroid or Bluestacks? Sometimes I cba to walk to my desk and get my phone.

It might be possible, earlier testing of the app was done with Genymotion before it was tested on one of my spare devices.
Title: Now Available in beta: Now powered multifactor - easy security
Post by: Teddy on May 31, 2016, 03:33:37 pm
Note: I just published this change on the dev console, Google says can take up to an hour to become available.

You can now opt-in to the beta program:

https://play.google.com/apps/testing/com.argonathrpg.multifactor

Following this, you'll have access to the store page: (do note: it might take a few moments to become available))

https://play.google.com/store/apps/details?id=com.argonathrpg.multifactor

You will then need to get started on the panel with scanning a token:

https://panel.argonathrpg.nl/now
Title: Re: Now available: Now powered multifactor - easy security
Post by: Teddy on June 01, 2016, 03:52:27 am
Additional questions asked today

Is it easy to setup?

Yes, you click a button on the panel and then using the app you scan a barcode. From then on you simply need to tap approve to requests you want to permit to login to your account.

How stable is it?

I've been using it to login for the past week and I've only had an issue once but I simply used the backup code method. It's fairly stable with just a few kinks to be ironed out. Your usage will help with that process though.

How does this prevent account breaches?

This reduces the chance of account breaches by adding an extra layer of security. As long as you have this enabled, only requests to your account that you approve are permitted. This means even if someone manages to guess your password or somehow obtains it, without your phone they still won't be able to access your account.

What if I don't have an internet connection?

Then why would you be trying to login to SA-MP? In any case you can still use the app's backup method of using the one time code.

Is there ads?

No.

Is it free?

Of course.

Why do you need camera permission?

So you can scan the barcode. That uses the camera. If you have Android 6, you can revoke the permission after the initial scan if you are paranoid.

What analytic networks are reported to?

Google.

Do I need to have an active cellphone plan?

No, you just need a WiFi connection if you want to get a notification to approve. Otherwise, you'd just be able to use the backup code.
Title: Re: Now available: Now powered multifactor - easy security
Post by: Julio. on June 01, 2016, 09:33:54 am
Looks interesting, but alas, I don't have a device running Android!
Title: Re: Now available: Now powered multifactor - easy security
Post by: Devin on June 01, 2016, 02:32:57 pm
Opening the NOW app just gives me a white screen on 4.4.4  :rage:
Title: Re: Now available: Now powered multifactor - easy security
Post by: Teddy on June 01, 2016, 07:20:57 pm
Opening the NOW app just gives me a white screen on 4.4.4  :rage:

The Now app or the new Multifactor, as I recall you have alpha access to Now and had the same problem with that one. In any case, try reinstalling it.
Title: Re: Now available: Now powered multifactor - easy security
Post by: Teddy on June 01, 2016, 07:55:04 pm
A note to those from RS5.2 beta:

Make sure you are installing the NEW multifactor app; the one used in beta is far more unstable and problematic. Ensure you are installing the 'com.argonathrpg.multifactor' version.

and a side note: some people with newer Samsung devices are experiencing a problem scanning the barcode. If this occurs, make sure you have this (https://play.google.com/store/apps/details?id=com.google.zxing.client.android&hl=en) installed. You may not need it however.
Title: Re: Now available: Now powered multifactor - easy security
Post by: eymas on June 01, 2016, 08:52:21 pm
Took me two minutes to scan the code after trying three different displays  :lol:
Title: Re: Now available: Now powered multifactor - easy security
Post by: Janar on June 01, 2016, 09:38:12 pm
I have been using Google Authenticator so far during the log-in process. Will this method remain next to this or do I have to switch to the new one at some point?
Title: Re: Now available: Now powered multifactor - easy security
Post by: Teddy on June 02, 2016, 01:21:17 am
I have been using Google Authenticator so far during the log-in process. Will this method remain next to this or do I have to switch to the new one at some point?

We will always keep both methods available, the choice to switch to this one is entirely yours.
Title: Re: Now available: Now powered multifactor - easy security
Post by: Teddy on June 16, 2016, 07:22:04 am
Any issues or ideas for improvements?

An update within the coming weeks will redesign the entire app to the new 'Now' theme which is a totally redesigned Now layout, color scheme, and interface.
Title: Re: Now available: Now powered multifactor - easy security
Post by: eymas on June 16, 2016, 07:49:08 am
so far the only one i've noticed was a slight delay when approving the request from an android wear device, though this is just a few seconds extra so it doesn't bother too much.
The rest is fine.
Title: Re: Now available: Now powered multifactor - easy security
Post by: Fuzzy on June 16, 2016, 08:36:31 am
It's slow sometimes. Or the notification doesn't come at all so you have to use the code.
Title: Re: Now available: Now powered multifactor - easy security
Post by: Teddy on June 16, 2016, 08:47:04 am
It's slow sometimes. Or the notification doesn't come at all so you have to use the code.

Does the notification only not appear when the app is in the foreground? This is the only time I myself have experienced an absent notification; this is actually a default behavior for Android and iOS. I have an idea for a work around with this.

so far the only one i've noticed was a slight delay when approving the request from an android wear device, though this is just a few seconds extra so it doesn't bother too much.
The rest is fine.

The app itself isn't specifically designed to work with Wear so the difficulty here would be in native protocols to relay the notification.
Title: Re: Now available: Now powered multifactor - easy security
Post by: Teddy on June 18, 2016, 07:30:00 am
An update has been published to the Play Store for version 0.1.0 which includes the following changes:

- fixed the backup code expiration counter showing 0 as time remaining (the time was offset 1 second)
- redesigned the entire user interface to be something a bit more appealing
- fixed / added a work around for Android not showing notifications when the app is in the foreground  (open and active)

The following image is the new in-app notification for approval, this only shows when the app is already open and on the screen, otherwise you will still get Android's native notification:

(https://dl.dropboxusercontent.com/s/7qgq516lbh9gr54/chrome_2016-06-18_01-24-11.png)
(PROTOTYPE RENDER)

We also have a new more fancier main page:
(https://dl.dropboxusercontent.com/s/k7w4s2xnwk16kmh/chrome_2016-06-18_01-27-28.png)
(PROTOTYPE RENDER)

The update can take several hours and up to 24 hours to reach your device.
Title: Re: Now available: Now powered multifactor - easy security
Post by: Stivi on June 18, 2016, 10:31:57 am
<icon>" Scan"
Title: Re: Now available: Now powered multifactor - easy security
Post by: Teddy on June 18, 2016, 03:49:01 pm
<icon>" Scan"

That is only on the prototype render, the actual app has a space :P
Title: Re: Now available: Now powered multifactor - easy security
Post by: Teddy on July 02, 2016, 04:19:50 pm
Pinned.

The service is almost done with beta as it's been performing really well. The Now network also has only had one outage since some patches a few weeks ago.
Title: Re: Now available: Now powered multifactor - easy security
Post by: Teddy on August 04, 2016, 07:46:52 pm
An update for Android, and an expected iOS version are around the corner:

https://venturecode.xyz/blog/posts/argonath-now-multifactor-2x

Title: Re: Now available: Now powered multifactor - easy security
Post by: Teddy on August 08, 2016, 04:30:38 am
Version 0.2.1 is available on the Play Store,

details: https://venturecode.xyz/blog/posts/updated-now-multifactor-021

Note: We do not provide support for the app directly, if you need support with the app please contact an Argonath RPG SA-MP Developer.
Title: Re: Now available: Now powered multifactor - easy security
Post by: Teddy on August 25, 2016, 01:49:22 am
Yes, before I get asked any more times, the app is Android 7.0 (Nougat) compatible. No app update required.
SimplePortal 2.3.7 © 2008-2025, SimplePortal